ObserveIT acts like a security camera on your servers, generating video recording and text audit logs of every action the user performs. ObserveIT captures all activity, even for applications that do not produce their own internal logs. Every action performed by remote vendors, developers, sysadmins and business users is tied to a video recording, providing bulletproof forensic evidence. ObserveIT is the deal solution for 3rd Party Vendor Monitoring and PCI/HIPAA/SOX/ISO Compliance Accountability, with a simple and direct solution for PCI Requirements #8, #10 and #12.

1. people audit
ObserveIT User Activity Session Recording software meets the complex compliance and security challenges
of user auditing.
ObserveIT acts like a security camera on your servers, generating video recording and text audit logs of every
action the user performs. ObserveIT captures all activity, even for applications that do not produce their own
internal logs. Every action performed by remote vendors,
developers, sysadmins and business users is tied to a
video recording, providing bulletproof forensic evidence.
ObserveIT is the ideal solution for 3rd Party Vendor
Monitoring and PCI/HIPAA/SOX/ISO Compliance
Accountability, with a simple and direct solution
fo PCI Requirements #8, #10 and #12.
Business Solutions
Remote Vendor Monitoring - Know exactly what every remote user is doing on your servers. Improve
security and ensure transparent SLA and billing validation.
Reducing Compliance Costs - Staying compliant is often just as costly as getting compliant. ObserveIT
provides easy gap management, including coverage of PCI Requirements 8, 10, 12, by eliminating the need to
rebuild audit protocols whenever you upgrade business software processes.
Root Cause Analysis - Achieve fast troubleshooting when you discover the root cause of system config changes.
Establish business intelligence with focused navigation and video playback.
Key Features
Record & Replay User Sessions - Know exactly what users did, with auto-generated video and text logs
for every app
Video Content Analysis - ObserveIT gives full transparency, even when apps have no internal logs built in.
For each user session, we tell you which apps, commands, files, URLs or system calls were run within that session,
including for cloud legacy apps that are notoriously difficult to audit.
Privileged User Identification - Tie a specific name to every PCI Compliance Highlights
shared-account user sessions. No more wondering “Who ran that
‘Administrator’ session?”, with a simple approach that
• PCI Req. 8 and Req. 10.1 – ObserveIT ties exact
user names (’John’) to shared-account access
does not require password rotation or checkin/checkout. (’Administrator’) without the need for complex
password vaults.
Server + Desktops + VDI Monitoring - Full audit coverage
for all user activity on servers, desktops or published applications. • PCI Req. 10.2 and Req. 10.3 -ObserveIT gives true
clarity for every user action. No more wondering
Bulletproof legal evidence - Reduce the risk of misaligned who or what caused a system change.
client-vendor interests by capturing bulletproof legal evidence • PCI 12 – ObserveIT ensures that users are informed
of all vendor activity. Video replay can be used during litigation of corporate policies at the exact time they log in.
or to eliminate the need for legal action.

2. ObserveIT can...
Because a picture is worth a thousand logs!
ObserveIT: Video replay that shows
exactly what the user did

3. ObserveIT Eliminates Blindspots:
Video and log summaries of every user action
ObserveIT lists every
user session
Windows Session:
Video + Analysis
ObserveIT captures window title,
application name, files opened, URL
accessed, UI element selection and
text entry
Exact video playback
Within each session,
details of every
action taken
Unix/Linux Session: Video + Analysis
ObserveIT captures shell and console logins,
including all command line activity plus underlying
system calls. (ex: If user types “rm*”, ObserveIT
also captures each file name that is deleted.)
List of each user command
Exact video playback of TTY
command prompt screen
For each command, a detailed list
of system calls

4. “ With so many privileged
vendors accessing our servers,
“ ObserveIT is critical for
answering management's
it can be difficult to keep an needs to demonstrate
eye on who's doing what. compliance.
Pelephone
” ”
Center to Promote Health Care Access
Who’s Using ObserveIT
ObserveIT Feature List
Generate Logs for Apps that have no logs - Detailed log for all apps, even Privileged User Identification - Add additional level of system access
those that have no internal logs, including Cloud apps (ex: salesforce.com), control for sensitive resources. Require shared-id users (ex: administrator)
legacy apps (ex: customized ERP) and commercial software (ex: Excel, SQL to add secondary login credentials. Manage users locally or tie in to AD.
query tools).
Real-time Playback - Session recordings are immediately available
Record and Replay Windows, Unix and Linux Sessions - Exact video once session begins. View session activity "on the air", while users are
playback of every session, including mouse movements, UI interaction, TTY still active.
command line interaction, text entry and underlying system calls. Simple
playback and navigation of recordings. Canned Audit Reports - Use our pre-built audit reports, or create your
own custom reports. Schedule reports to run automatically for email
Video Content Analysis gives intelligent text logs - Captures details about delivery, or run ad-hoc and export to Excel or XML.
each user action: Application name, User name, Server, Window title, File
or Resource accessed, underlying system calls. Interactive drilldown and Robust Security - Agent-Server encryption, Digital Signatures and
fast navigation eliminates the need to reply hours of video to find what Watchdog mechanism ensure the highest security and reliability.
you need.
Small Footprint - Ultra-efficient data storage: Less than 250GB/year for
Complete Coverage - Agnostic to network protocol and client application. high-usage, 1000 server environment.
Captures all remote and console sessions: SSH, Telnet, Terminal Services, Minimal Agent CPU utilization: 0% CPU when no console active, 1%-2%
Citrix, Remote Desktop, PC-Anywhere, VMware, VNC, Dameware and more. CPU, 10 MB RAM during session).
Like a Security Camera on Your Servers.
1 (800) 687-0137 sales@observeit.com www.observeit.com people audit